Microsoft Security Bulletin Release for March, 2017

[Corrine]

After the last minute issue that resulted in the postponement of the February updates, security updates have been released for March.

Although this was to be the start of replacing security bulletins with the new Security Updates Guide, security bulletins were also published this month to provide extra time to prepare for the transition. The new guide includes the ability to view and search security vulnerability information in a single online database. The guide is described as a "portal" by the MSRC Team in Furthering our commitment to security updates.

Microsoft released seventeen (17) bulletins. Nine (9) bulletins are identified as Critical and eight (8) rated Important in severity. The updates address vulnerabilities in Microsoft Windows, Microsoft Edge, Internet Explorer, Microsoft Office, Skype for Business, Microsoft Lync, Microsoft Silverlight, Microsoft Server Software, Microsoft Communications Platforms and Software, Microsoft Exchange and Adobe Flash Player for Windows 8.1 and above.

Addressed in the updates are Remote Code Execution, Information Disclosure and Elevation of Privilege.

Windows 10 update history
Microsoft Security Bulletin for March 2017

 

[Digerati]

I found it interesting that several of the updates affected Windows Vista and IE 9. I guess this is one last hurrah before the end of extended support next month on the 11th.

 

[Corrine]

Those were my thoughts as well, although April 11 is the second Tuesday of the month so there may also be updates for Windows Vista and IE9 then.

 

[Digerati]

Yeah, they can always do out-of-cycle updates too. But with less than 1% of the market share, I don't see MS having much incentive to put resources into it.

 

[Corrine]

Microsoft released a new cumulative update for PCs running the "Anniversary Update, Version 1607. KB4015438 replaces KB4013429 and is a quality improvement update and does not include any new features.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed.

The update is available from Windows Update. The standalone package is available in the Microsoft Update Catalog.

 

[Corrine]

Microsoft released three replacement cumulative updates.

There is one update each for Windows 10 version 1607 (Anniversary Update) and version 1511. The update includes quality improvements with no new operating system features introduced. The third update is for Windows 8.1, Windows Server 2012 R2, Windows 7 Service Pack 1 (SP1), and Windows Server 2008 R2 SP1.

See the KB articles for additional information:

• Windows 10, 1607, OS Build 14393.970: KB4016635
• Windows 10, 1511, OS Build 10586.842: KB4016636
• Windows 8.1, Windows Server 2012 R2, Windows 7 Service Pack 1 (SP1), and Windows Server 2008 R2 SP1: KB4016446